0c5048370b4dd52ddaf8fc5e3d653db8_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0c5048370b4dd52ddaf8fc5e3d653db8_JaffaCakes118
Size

184KB
MD5

0c5048370b4dd52ddaf8fc5e3d653db8
SHA1

1f1fa1a3cb090d02209f5646fa17147943552325
SHA256

1dc593235a94c53b8cc41aac9624bbf176132521add5f5507b7bf0f410e5213a
SHA512

1e40169c62e9948d25d896b3b4bdf8125dea10b3547905659a030469eb51b814c3fc79f502b5c7b21cc8750c25c42e33e50e52adefdf4556a8e65921f82f4e69
SSDEEP

3072:6cyxbI1B/B/bKbXWnXXNIbHwCT5KT8VgFG5Tc0bTXAGQRLPITkrwDojPOxogk:6c/sfHjKAVsG5TsL7ITNMz0Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c5048370b4dd52ddaf8fc5e3d653db8_JaffaCakes118

Files

0c5048370b4dd52ddaf8fc5e3d653db8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4272981cd7cf28c7ea00414586fbfa95

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDriveTypeA
GetComputerNameA
LoadLibraryA
FreeLibrary
SetPriorityClass
RemoveDirectoryA
GetFullPathNameA
CreateDirectoryA
CopyFileA
GlobalFree
GlobalAlloc
GetCurrentThreadId
GetStartupInfoA
CreateFileMappingA
GetDiskFreeSpaceA
GlobalMemoryStatus
GetSystemInfo
GetTickCount
GetSystemDirectoryA
SetFileTime
CreateFileA
GetCurrentProcessId
GetStdHandle
MapViewOfFile
DeleteFileA
FreeResource
SizeofResource
LoadResource
FindResourceA
GetCommandLineA
SetErrorMode
GetModuleFileNameA
WriteFile
OpenProcess
TerminateProcess
GetExitCodeProcess
TerminateThread
ReadFile
Sleep
FileTimeToLocalFileTime
FileTimeToSystemTime
FindFirstFileA
FindNextFileA
FindClose
GetLastError
FormatMessageA
GetModuleHandleA
UnmapViewOfFile
CreatePipe
GetCurrentProcess
DuplicateHandle
CloseHandle
CreateProcessA
GetWindowsDirectoryA
CreateSemaphoreA
GetVersionExA
HeapReAlloc
TlsSetValue
GetEnvironmentStrings
CompareStringW
CompareStringA
GetLocaleInfoW
GetLocaleInfoA
SetEndOfFile
SetEnvironmentVariableA
GetProcAddress
GetStringTypeW
GetStringTypeA
FlushFileBuffers
SetStdHandle
GetOEMCP
GetACP
CreateThread
FreeEnvironmentStringsW
UnhandledExceptionFilter
FreeEnvironmentStringsA
SetLastError
TlsAlloc
GetCPInfo
GetEnvironmentStringsW
LCMapStringW
WideCharToMultiByte
LCMapStringA
MultiByteToWideChar
GetFileType
SetHandleCount
SetFilePointer
GetCurrentDirectoryA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
HeapCreate
ExitProcess
RtlUnwind
TlsGetValue
HeapFree
HeapAlloc
ResumeThread
GetSystemTime
ExitThread
GetTimeZoneInformation
MoveFileA
GetLocalTime
GetFileAttributesA
GetVersion

user32

IsWindow
MessageBoxA
SendMessageA
DefWindowProcA
PeekMessageA
UnhookWindowsHookEx
DestroyWindow
CallNextHookEx
PostThreadMessageA
CreateWindowExA
ExitWindowsEx
DispatchMessageA
GetMessageA
RegisterClassA
SetWindowsHookExA

gdi32

CreateDCA
CreateCompatibleDC
CreateDIBSection
SelectObject
BitBlt
GetDIBColorTable
DeleteObject
DeleteDC
GetDeviceCaps

wsock32

listen
WSAStartup
gethostbyname
htons
bind
sendto
recvfrom
connect
inet_ntoa
setsockopt
recv
send
WSAGetLastError
closesocket
socket
accept

mpr

WNetCloseEnum
WNetOpenEnumA
WNetEnumCachedPasswords
WNetAddConnectionA
WNetCancelConnectionA
WNetEnumResourceA

winmm

PlaySoundA

avicap32

capCreateCaptureWindowA
capGetDriverDescriptionA

svrapi

NetSessionEnum
NetShareEnum
NetShareDel
NetShareAdd

advapi32

RegEnumKeyExA
RegDeleteKeyA
RegCreateKeyA
RegCloseKey
RegEnumValueA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegDeleteValueA
GetUserNameA

Sections

.text
Size: 81KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4272981cd7cf28c7ea00414586fbfa95

Headers

File Characteristics

Imports

kernel32

user32

gdi32

wsock32

mpr

winmm

avicap32

svrapi

advapi32

Sections

.text Size: 81KB - Virtual size: 81KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 14KB - Virtual size: 42KB

.idata Size: 4KB - Virtual size: 4KB

.rsrc Size: 10KB - Virtual size: 9KB

.reloc Size: 7KB - Virtual size: 6KB

.text
Size: 81KB - Virtual size: 81KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 14KB - Virtual size: 42KB

.idata
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 10KB - Virtual size: 9KB

.reloc
Size: 7KB - Virtual size: 6KB